Privacy Policy for PHREE app (Android & Google Play Edition)

Effective Date: September 28, 2026
Last Updated: September 28, 2026

PHREE ("we," "our," or "us") provides a mobile navigation platform designed to help individuals identify essential personal needs, collaborate with dedicated Navigators, and connect directly with trusted community service providers.
This Privacy Policy describes our practices regarding the collection, use, disclosure, storage, and deletion of personal data collected through our Android application (the "App") and related services (collectively, the "Services"), specifically formatted to comply with Google Play Developer Program Policies, including the Google Play User Data Policy and Data Safety requirements.

1. Information We Collect
We collect information directly from you, automatically through your use of the App, and via operational diagnostic tools.

A. Personal Information (User-Provided)

• Contact & Account Information: Your first and last name, email address, telephone number, residential/physical address, and user credentials.
• Essential Needs & Assessment Data: Specific information you provide regarding your essential resource requirements (e.g., housing, nutrition, transportation, clothing, healthcare access, employment support, or utility assistance).
• Demographic & Eligibility Details: Optional criteria you submit to determine eligibility for specific community programs or social services (e.g., household size, veteran status, or assistance program enrollment).
• Navigator Communications & User Content: In-app chat messages, task requests, action plans, open-ended notes, and follow-up documentation exchanged between you and your assigned Navigator.

B. Automatically Collected Data & Technical Identifiers

• App Activity & Interactions: Feature interaction metrics, referral completion events, task statuses, navigation progress indicators, and session timestamps.
• Device & Other Identifiers: Device installation identifiers, Firebase Cloud Messaging (FCM) registration tokens, Android OS version, and hardware model, collected strictly for push notification routing, security authentication, and session persistence.
• Diagnostics & Performance: Crash logs, stack traces, app launch times, and latency diagnostics collected to maintain app stability and resolve runtime errors.

2. Legal Basis and Purpose of Data Processing

We process personal information under the following legitimate service purposes:
Purpose Category
Description of Use
App Functionality
Authenticating user logins, matching you with a qualified Navigator, maintaining intake notes, and managing task workflows.

Account Management
Establishing, administering, updating, and securing your registered account.

Referral Connections (User-Initiated)
Transmitting intake details to specified external community partners at your explicit direction.

Developer Communications
Sending essential service notices, security updates, and in-app Navigator task alerts.

Analytics & Diagnostics
Monitoring system uptime, identifying application crashes, and assessing workflow bottlenecks.

No Commercial Tracking or Sale of Data: PHREE does not sell user personal data, does not lease user contact lists, and does not utilize personal data, advertising identifiers, or device tokens for cross-app behavioral tracking or third-party marketing.

3. How We Share Data
PHREE does not share your personal data with third parties except under the following structured operational conditions:

A. Your Assigned Navigator
Your assigned Navigator has direct access to your contact information, intake records, goals, and messaging history to provide continuous case management and resource support.
B. External Community Referral Partners (User-Initiated Action)
When you and your Navigator identify an external resource (e.g., a local food pantry, emergency shelter, or medical clinic), PHREE transfers your relevant contact and assessment details to that provider only upon your affirmative action and informed consent. These entities operate as independent data controllers governed by their own organizational privacy practices.
C. Service Providers and Subprocessors
We disclose data to vetted technical infrastructure vendors who handle services strictly on our behalf under binding confidentiality agreements:

• Cloud hosting and secure relational database providers.
• Secure push notification delivery networks (Google Firebase Cloud Messaging).
• Application logging, error analysis, and diagnostic tracking services.

D. Legal Compliance & Harm Prevention
We may disclose records if required by valid legal process (e.g., court order or statutory demand) or if we believe in good faith that disclosure is necessary to prevent imminent death, serious physical injury, or child abuse.

4. Data Security Standards
PHREE implements robust technical safeguards to protect your personal and sensitive information:

• Encryption in Transit: All network traffic between the Android App, client devices, and our backend APIs is encrypted using Transport Layer Security (TLS 1.3).
• Encryption at Rest: Sensitive database volumes, messaging backups, and account records are encrypted at rest using AES-256 standard encryption.
• Access Governance: Access to client records is restricted to authorized personnel and assigned Navigators through role-based access control (RBAC) and multi-factor authentication (MFA).

5. Data Retention, Account Deletion & User Rights
In strict compliance with Google Play's Account Deletion Policy, PHREE provides clear, accessible paths to manage and delete your data.
A. In-App Account Deletion
You can initiate a complete and permanent account deletion directly within the Android App at any time:

1. Open the PHREE App.
2. Navigate to Account Settings > Security & Privacy.
3. Select Delete Account & Data.
4. Confirm your request.

B. Web-Based Deletion Request (Non-App Pathway)
If you have uninstalled the App or cannot access your mobile device, you may submit an account and data deletion request online without reinstalling the application by visiting our public deletion page:
https://phree.org/delete-account
Alternatively, email a formal deletion request to [email protected] from your registered email address with the subject line "Account Deletion Request".
C. What Happens to Your Data

• Immediate Deletion: Upon processing your deletion request, your user account credentials, direct chat transcripts, personal profile identifiers, and active task lists are purged from our active operational databases within thirty (30) days.
• Compliance Retentions: Where state, federal, or grant compliance guidelines mandate document retention for social service referrals, remaining audit records are permanently scrubbed of direct identifiers and stored in aggregated, non-identifiable formats.

6. Children's Privacy
PHREE is designed for general audiences seeking resource navigation and is not directed to children under 13 years of age. We do not knowingly collect personal information directly from children under 13. If we discover that a minor under 13 has submitted personal information without verified legal guardian consent, we will delete the account and associated records immediately.

7. Policy Updates
We reserve the right to revise this Privacy Policy to reflect modifications to the App, our service referral workflows, or evolving regulatory and app store guidelines. Any material updates will be communicated through an in-app notice or by direct email notification prior to implementation.

8. Contact Information
For inquiries, concerns, or requests regarding this Privacy Policy or PHREE's data practices, contact us at:

• Young Chances Foundation
• Email: [email protected]
• Postal Address: 2703 Tasker Street, Philadelphia, PA 19145
• Phone: (267) 585-2923